Efficient headunit communication integration

ABSTRACT

In an example, the mobile device may be configured to determine whether to authorize a request for the vehicle head unit to utilize a resource of the mobile device. The mobile device may be configured to utilize a proxy of the mobile device to establish a connection with a destination in response to determining to authorize the request.

PRIORITY

This application is a continuation of U.S. patent application Ser. No. 14/694,803, filed Apr. 23, 2015, which is a continuation of U.S. patent application Ser. No. 14/135,165 filed on Dec. 19, 2013, now issued as U.S. Pat. No. 9,370,029, which claims benefit of U.S. Provisional Application No. 61/740,376 filed on Dec. 20, 2012, and claims priority as a continuation-in-part of U.S. patent application Ser. No. 13/605,846 filed on Sep. 6, 2012, now issued as U.S. Pat. No. 9,002,574 on Apr. 7, 2015, which is a non-provisional of U.S. Provisional Application No. 61/533,694 filed on Sep. 12, 2011 and U.S. Provisional Application No. 61/538,063 filed on Sep. 22, 2011 and which is a continuation-in-part U.S. patent application Ser. No. 12/777,989 filed on May 11, 2010, now issued as U.S. Pat. No. 8,838,332, on Sep. 16, 2014, which is a continuation-in-part of U.S. patent application Ser. No. 12/729,207 filed on Mar. 22, 2010, now issued as U.S. Pat. No. 8,831,823 on Sep. 9, 2014, which is a non-provisional of U.S. Provisional Application No. 61/252,066 filed on Oct. 15, 2009 and U.S. Provisional Application No. 61/260,781 filed on Nov. 12, 2009, each of which is herein incorporated by reference in its entirety.

COPYRIGHT NOTICE

© 2011-2013 Airbiquity, Inc. A portion of the disclosure of this patent document contains material which is subject to copyright protection. The copyright owner has no objection to the facsimile reproduction by anyone of the patent document or the patent disclosure, as it appears in the Patent and Trademark Office patent file or records, but otherwise reserves all copyright rights whatsoever. 37 CFR §1.71(d).

BACKGROUND OF THE INVENTION

A motor vehicle can be equipped with a “head unit” having a user interface. The user interface can include various resource components such as a screen, speakers, a microphone, a touch screen and/or keypad, etc.

Smart phones or other mobile phones (also called handsets) can download various application programs (“applications”) that operate on the phone. A user can utilize a user interface of the phone to control the application and/or utilize the application in some way (such as watching the visual display or listening to the audio output). Extending applications from the mobile phone to the head unit has become a popular feature offered by various service providers and vehicle manufacturers. As a result, the user can take advantage of better user interface components offered by the head unit (e.g. a larger screen and higher quality audio output). It is desirable to provide a mechanism to control, manage, and enable the extension of mobile phone applications to a vehicle head unit.

SUMMARY OF THE INVENTION

The following is a summary of the invention in order to provide a basic understanding of some aspects of the invention. This summary is not intended to identify key/critical elements of the invention or to delineate the scope of the invention. Its sole purpose is to present some concepts of the invention in a simplified form as a prelude to the more detailed description that is presented later.

In one example, a network device stores a mapping of application operation modes to vehicle conditions such as a first condition of the vehicle powered but not moving and a second condition of the vehicle moving. The network device receives a wirelessly transmitted request (sent by either a wireless transmitter of the vehicle or of a mobile device coupled to the vehicle) for a particular application to utilize an interface powered by the vehicle. The network device compares an application identifier specified by the received request to the mapping. The network device then identifies a portion of the vehicle interface according to the comparison and signals control software on the vehicle to grant the particular application access to only the identified portion of the vehicle interface. The application can reside on the mobile device and utilize the vehicle interface as an extended interface, or the application can reside on the vehicle itself.

In an example, a processing device sends, to a remote network device, a request for an application of a mobile device to utilize a resource of a vehicle head unit, the request including a first profile of the vehicle head unit and a second profile of the mobile device. Responsive to sending the request, the processing device receives an instruction from the remote network device, the instruction to be executed by embedded software of the vehicle head unit so as to enable the application to utilize a resource of the vehicle head unit.

In an example, the embedded software comprises a template Human Machine Interface (HMI) application including a plurality of HMI screens. In an example, the template HMI application operates without an interpreter component.

In an example, the mobile device may be configured to determine whether to authorize a request for the vehicle head unit to utilize a resource of the mobile device. The mobile device may be configured to utilize a proxy of the mobile device to establish a connection with a destination in response to determining to authorize the request.

Additional aspects and advantages of this invention will be apparent from the following detailed description of preferred embodiments, which proceeds with reference to the accompanying drawings.

BRIEF DESCRIPTION OF THE DRAWINGS

FIG. 1 illustrates a system to control the use of a head unit as an extended interface for a phone application in a safe and intelligent manner.

FIG. 2A illustrates a flow chart showing operation of the software 32 of FIG. 1.

FIG. 2B illustrates a flow chart showing a contention scheme that can be used by the software 32 of FIG. 1.

FIG. 3 illustrates a flow chart showing operation of the software 30A-B of FIG. 1.

FIG. 4 illustrates a system to select and distribute applications to a vehicle in a safe and intelligent manner.

FIG. 5 illustrates a flow chart showing operation of the software of FIG. 4.

FIG. 6 illustrates more detail of the system shown in FIGS. 4-5.

FIG. 7 illustrates a system to select and distribute applications to a vehicle in a safe and intelligent manner according to user preferences.

FIG. 8 illustrates a flow chart showing operation of the software of FIG. 7.

FIG. 9 illustrates more detail of the system shown in FIGS. 7-8.

FIG. 10 illustrates a system to select a head unit graphical interface according to a configuration of the head unit.

FIG. 11 illustrates a system to generate and send remote computing approvals to the head unit.

FIG. 12 illustrates a system to push graphical user interface updates to the head unit in response to the mobile device generating a request for a new application or the user web portal selecting a new application.

FIG. 13A illustrates a flow chart showing pre-operation of a parental control scheme.

FIG. 13B illustrates a flow chart showing operation of the parental control scheme.

FIG. 14 illustrates a system to operate a vehicle head unit as an extended interface for a mobile device.

FIG. 15 illustrates a signaling diagram showing one example of operations that can be performed by the server, the vehicle head unit, and the mobile device of FIG. 14.

FIG. 16 illustrates a system for extending a mobile phone user application to utilize an HMI of a vehicle head unit in accordance with one embodiment of the present disclosure.

FIG. 17 is a functional block diagram illustrating an example of software components contained in a handset application proxy (HAP) application.

FIG. 18 is a simplified diagram illustrating data flow between a user application program and a vehicle head unit HMI by way of an integrated HAP application.

FIG. 19 illustrates a messaging or signaling diagram showing an example of messaging among software components to process an event received from a head unit HMI in connection with execution of a user app on a mobile phone.

FIG. 20 illustrates a messaging or signaling diagram showing an example of messaging among software components to process a message received from a user app executing on a mobile phone, and if necessary generating an update message to an HMI on a head unit.

FIG. 21 illustrates one example of a vehicle head unit with an HMI that includes a generic display screen.

FIG. 22 illustrates a system for efficient headunit communication integration.

FIG. 23 is a simplified communication diagram illustrating a smartphone application enabling data exchange between an automotive infotainment system (IVI) and a backend (remote server) utilizing (SOCKet Secure) SOCKS Proxy protocol.

FIG. 24 is a simplified communication diagram illustrating a smartphone application providing transparent proxy server functionality to enable data exchange between an IVI and a backend (remote server).

FIG. 25 is a simplified communication diagram illustrating a smartphone application enabling data exchange between an automotive IVI and a backend (remote server) utilizing SOCKS Proxy protocol chaining.

FIG. 26 is a simplified communication diagram illustrating a smartphone application providing transparent proxy server functionality to enable data exchange between an IVI and a backend (remote server) utilizing transparent proxy chaining.

DETAILED DESCRIPTION OF PREFERRED EMBODIMENTS

In one example, a user couples a phone to a motor vehicle head unit using a wired or wireless connection for the purpose of using the head unit as an extended interface for the phone. The user may be permitted to control an application on the phone using the interface of the head unit, depending on a determination via a remote server as described in the next paragraph. Similarly, the user may be permitted to watch or listen to an output of the application over the interface of the head unit, depending on a determination via a remote server as described in the next paragraph.

Novel client control software on the phone and the head unit interfaces with novel server control software on a remote server over a wireless connection extending from the phone. The client control software identifies a phone application to utilize the head unit as an extended interface.

The server control software compares the identified phone application to one or more databases accessible by the remote server. Based on the comparison, the server control software determines whether the identified application will be permitted to utilize the head unit as an extended interface, and if so, which components of the head unit interface will be permitted to be used by the application. The server control software signals the client control software to control the phone and head unit according to the determination. Accordingly, any utilization of the head unit as an extended interface can be controlled in a safe and intelligent manner.

FIG. 1 illustrates a system to control the use of a head unit as an extended interface for a phone application in a safe and intelligent manner.

The system 100 includes software 30A and 30B configured on, respectively, a mobile phone 20 (or other mobile device) and head unit 21 (or other interface powered by a motor vehicle such as a user interface integrated with a steering wheel or a user interface integrated with a seat back). The software 30A and 30B interfaces with the software 32 configured on a remote server 22 to regulate and control when and how applications 40 operating on the phone 20 access I/O resources 1-4 of the head unit 21.

FIG. 2A illustrates a flow chart showing operation of the software 32 of FIG. 1.

In block 201, the software 32 receives a request for a particular application 40 on the phone 20 to utilize the interface (including input 24 resources 1-2 and output 25 resources 3-4) of the head unit 21. The request includes a user identifier corresponding to the user of the motor vehicle and/or head unit 21, an application identifier corresponding to the particular application 40, and vehicle status information. The user identifier could be an identifier provided by the user when the control software 30A was first activated in the mobile phone 100, user's phone number, etc.

In block 202, the software 32 authenticates the user. This can include determining whether the user identified by the user identifier matches a database 11 of subscribers for the service of extending the interface of the phone 20 using the head unit 21. If the user is not authenticated in diamond 203, then in block 204A the software 32 signals the software 30A/B to block access by the application 40 to the head unit 21. It should be understood that the system 100 can be configured so that block 202 is optional.

Otherwise, if the user is authenticated, then in block 204B the software 32 authenticates the application 40 by comparing the application identifier to a list 12 of applications (also referred to as a whitelist). This list 12 can be compared by version number such that one particular version of an application 40 can be identified on the list while a different version is excluded. If the particular application 40 (or particular version) is not on the list 12 in diamond 205, then in block 204A the software 32 signals the software 30A-B to block access by the application 40 to the head unit 21.

Otherwise, if the application 40 is authenticated, then in block 206 the software 32 compares the application identifier and the current vehicle status information to a mapping 15 of application operation modes. As shown, the mapping 15 can have an entry 17 for each application 40 of the list 12. Each entry 17 includes a mapping that is particularized for the corresponding application 40. For example, an entry 17 for application A maps the vehicle status “vehicle moving ≦than X” to resources 1, 2, and 4 (namely application A will be permitted to access the only the screen 1, the speaker 2, and microphone 4 under this vehicle condition) whereas the entry 17 for application C maps the vehicle status “vehicle moving ≦than X” to only resources 2 and 4 (namely application C will be permitted to access the speaker 2 and microphone 4). One real world example might be a navigation application A and a video game application C, where even when a passenger is present the system 100 will not allow the video game application C to be displayed on the head unit 21 screen 1 as this is deemed to be too much of a distraction for a driver whereas the navigation application A can be displayed on the head unit 21 screen 1. Another real world application can be a vehicle with a plurality of interfaces, such as a head unit and a display attached to the back of a seat. An application can be granted access to the back seat display under conditions where the same application would not be granted access to the head unit.

It should be understood that, in other examples, the mapping 15 can be stored on the mobile phone 20. In this case, the comparison described in the previous paragraph can be performed by the control software 30A. In such a case, the control software 30A checks the current vehicle status by communicating with the head unit 21.

In block 207, the software 32 identifies a set of some or all of the I/O resources of the head unit 21 according to the comparison. In block 208, the software 32 signals the remote software to provide the particular application 40 access to only those ones of the I/O resources 1-4 of the identified set. In one example, such signaling can include controlling the software 30A on the mobile phone 20 so that all access requests sent from the mobile phone 20 conform to the identified set of the I/O resources. In another example, such signaling can include controlling the software 30B on the head unit 21 to block access requests sent from the mobile phone 20 in any manner such as by simply disabling I/O resources on the head unit 21. In yet other examples, such signaling can include controlling both the software 30A and the software 30B.

FIG. 2B illustrates a flow chart showing a contention scheme that can be used by the software 30B of FIG. 1. A contention scheme can be utilized in addition to the scheme shown in FIG. 2A.

In block 209, the software 30B determines whether any of the I/O resources of the identified set are currently in use. If none are in use in diamond 210, then in block 211A the software 30B provides the particular application access to only those I/O resources of the identified set.

Otherwise, if at least one of the resources of the set is in use, then in block 211B the software 30B identifies a by-resource ranking 13 of the applications for each of the in-use resources of the identified set. This is shown in FIG. 1 where there is a ranking 13 for each resource 1-4. In block 212, the software 30B compares the application identifier to the by-resource ranking(s) 13 to determine whether the application 40 has priority for any of the in-use resources of the identified subset (the may be performed via signaling since the ranking 13 is shown on the remote server or the ranking may have been sent to the vehicle interface in an earlier process). This comparison will indicate whether the application currently using a particular in-use resource is deemed higher or lower priority than the requesting application for that in-use resource. In block 213, the software 30B provides the particular application 40 access to only those ones of the I/O resources 1-4 of the identified set that are also not currently in use or are in use by a lower priority application.

FIG. 3 illustrates a flow chart showing operation of the software 30A-B of FIG. 1.

In block 301, the software 30A-B sends a request for a particular application 40 on the phone 20 to utilize the interface of the head unit 21. In block 302, the software 30A-B receives back a signal indicating whether or not the application 40 is authorized to access the head unit 21 at this time, and if so, an identification of which resources 1-4 can be utilized. If the application 40 is not authorized in diamond 303, then in block 304A the software 30A-B outputs a notification that the application 40 is not authorized to access the head unit. This notification could be output by the mobile phone 20 or the head unit 21, or both.

Otherwise, if the application 40 is authorized in diamond 303, then in block 304B the software 30A-B controls the mobile phone 20 and the head unit 21 to cause the application 40 to be extended to the identified resources. If only a subset of possible resources for the application 40 (from the respective mapping 17) are utilized due to a conflict, then the software 30A-B may generate a notification to alert the driver about the lower priority application being suspended before activating the higher priority application. In another example, if the resources are currently used by a lower priority application, software 30A-B can automatically suspend/end the lower priority application and allow the higher priority application to be activated using the required resources.

If it is determined that application 40 can be extended to the head-unit 21, the server 22 can download corresponding “control panel” software to the head unit to control the application 40. By having downloading this software to the head unit 21 based on the application being requested, a service provider can customize and update the “control panel” accordingly when new applications or update to existing applications are available. The head-unit can have a web-code renderer to display the “control panel” software.

Referring again to FIG. 1, the software 30A-B interfaces with the software 32 over a wireless connection extending from the phone 20. This wireless connection can utilize a packet data connection (including but not limited to GPRS, EDGE, EVDO, UTMS, WiMAX, WiFi, etc.), Short Message Service (SMS), or In-Band-Signaling modems on the mobile phone 20 and the remote server 22 as described in U.S. Pat. Nos. 6,144,336; 6,690,681; and 6,493,338.

Still referring to FIG. 1, it is noted that the mobile phone 20 can couple to the head unit 21 by using a connection such as a USB, Bluetooth, or WiFi connection. These are just examples, however, and in other cases a different connection and/or protocol may be suitable for utilizing the interface of the head unit 21 for the application 40 of the phone 20.

It should be understood that the mapping 15 can have any vehicle statuses and that the four illustrated examples are merely some examples. For example, another vehicle status could be whether the vehicle is moving more than speed ‘X’ AND a passenger is present.

It should be understood the head unit 21 can include less than all the example resources shown, or other resources that are not shown. For example, another possible I/O resource component is a text to speech component.

In the illustrated example, a first application can be permitted to access a first subset of whichever resources are actually present on the head unit 21 based on an intelligent decision by the system 100, while a second different application can be permitted to access a second subset of the resources, or even all of the resources.

It should be understood that the applications 40 can be ranked “by resource” as illustrated or there can be a single ranking including all the applications 40. The system 100 is implemented with the “by resource” ranking as shown, but the concepts described herein could be implemented in another system that ranks applications independently of resource.

FIG. 4 illustrates a system to select and distribute applications to a vehicle in a safe and intelligent manner.

One difference between the previously discussed system of FIG. 1 and the system of FIG. 4 is the install location for applications. Whereas the applications A-C in the system 100 of FIG. 1 are installed and operating on the mobile phone 20 (using the head unit 21 or other interface powered by the vehicle as an extended interface), the applications J-L in the system 200 of FIG. 4 are installed on the head unit 221 or other component powered by the vehicle. In system 200 of FIG. 4, the software 230-232 enables a provider to select which applications can be installed on the head unit 221 and control distribution of the selected applications to the vehicle.

Before discussing the details of system 200 in the following paragraphs, it should be apparent that the structures and functions of system 100 described in FIGS. 1-3 can be combined with the structures and functions of system 200 (FIGS. 4-6) into a single system. For example, a single system could include some applications installed on a mobile phone using an interface of a vehicle as an extended interface and some applications installed on a component of the vehicle.

FIG. 5 illustrates a flow chart showing operation of the software of FIG. 4.

In block 501, in response to the vehicle being powered up, the control software 230 sends a signal 244 to the server 222 indicating vehicle power-up. The signal 244 can be sent over a local connection such as a USB or Bluetooth connection to be relayed by the mobile device 220 over a wireless telecommunications network.

In block 502, the software 232 checks a download directory 239 (sometimes referred to as a “sandbox”) associated with the vehicle to determine if there are any applications to be downloaded to the vehicle. A scheme for intelligently selecting applications that are present in the download directory 239 will be discussed in detail later with reference to FIG. 6.

If the check by the software 232 indicates that the download directory 239 includes at least one application, the process continues. For now, let it be assumed for the purposes of illustration that the download directory 239 includes applications 240 (J-L). Accordingly, in block 503 the software 232 generates and sends signaling 245 to cause the IP gateway software 231 on the mobile phone 220 to operate as an IP gateway for forwarding applications to the head unit 221. In one example, signaling 245 includes communications to dynamically load the mobile phone 220 with the software 231 in response to the determination in block 502 and cause the software 231 to operate thereon for the download to vehicle. The signaling 245 may not take place if the mobile phone 220 is already loaded with the software 231 and ready for IP gateway operation. In other examples, the signaling 245 could originate from the control software 230 on the head unit 221 in response to detecting vehicle power-up.

In block 504, the software 232 generates and sends IP packets 250 to download the applications 240 onto the vehicle. The IP packets 250 are received by the mobile phone 220 and forwarded by operation of the software 231 to the head unit 221. In block 505, the software 230 receives the IP packets 230 and installs the applications 240 (J-L) on the vehicle (installation can be on components of the head unit 221 or other vehicle components).

Thereafter, a user of the vehicle can operate the applications J-L using the head unit 221 as an interface. It should be understood that the software 230 and 232 can operate according to any of the principles described in FIGS. 1-3. For example, the software 230 and 232 can regulate utilization of the I/O resources of the head unit 221 by the active application(s) according to current vehicle status. As another example, in systems where applications are installed on both the vehicle and a mobile device, the software 230 and 232 can include all applications that utilize the vehicle interface in an application ranking/priority table similar to the table 13 (FIG. 1).

In one example, the head unit 221 includes a web code renderer 299, for example an HTML renderer, controlled via the software 230. The web code renderer 299 is configured to display HTML code, but unlike a browser, does not allow a user to freely navigate to web locations. Specifically, the web code renderer 299 displays only applications allowed by the provider, e.g. specified by the server 222.

It should be understood that the flow chart described above addresses updating applications installed on the vehicle. The vehicle can also be pre-loaded with certain applications so that some of the applications installed on the vehicle are downloaded according to the flowchart while others are installed thereon during manufacturing.

Thus, based on the principles described above, vehicles can be manufactured with none of the applications installed on the vehicle but instead the applications can downloaded to the vehicles when the drivers are present in the vehicles. The types of applications downloaded to the vehicles are governed by preferences defined in the network server provided by the drivers.

FIG. 6 illustrates more detail of the system shown in FIGS. 4-5.

It was previously explained that the server 222 includes a download directory 239 of applications waiting to be downloaded on a per-vehicle basis. FIG. 6 illustrates the user web portals 601, 604, and 605 that can be involved in selection of the applications in the download directory 239 and describes an example use of these web portals 601, 604, and 605.

A provider such as an OEM of the vehicle operates the web portal 601. Using an interface such as a computing terminal 625, the provider controls an application selection portion 608 of the web portal 601 with communications 650 to assemble the controlled list 610 of applications from the list 609 of all applications that can be installed on the vehicle. Typically building the list 610 from the list 609 involves validation of the applications from a technical standpoint and/or a business standpoint of the provider.

The provider also sends communications 651 to select applications from the controlled list 610 to be installed on a particular vehicle. These selections may be based on a mapping a vehicle models to applications, for example. These selections 652 fed into the download directory 239.

Regarding the list of all available applications 609, it should be understood that this list can be assembled by applications developed by the provider and/or third parties. In the case of third parties providing applications, the third party uses the application submission 618 portion of the web portal 604 (which is hosted by a web server operated by the provider in one example) to submit an application 649 to be included in the list 609.

A vehicle user can also select applications to be included in the download directory 239 using a computing terminal 626, for example using any internet accessible computing device such as the mobile device or a desktop computer. The computing terminal 626 accesses the application selection portion 628 of the user web portal 605 (which is hosted by a web server operated by the provider in one example) to view the controlled list 610 of applications that can be installed on his vehicle. The user can then send communications 661 to select applications from the controlled list 610 that the user would like installed on his vehicle. These selections 662 are fed into the download directory 239.

The user web portal 605 can also be configured to allow a user to remove particular applications from the download directory 239, e.g. the user may desire to remove one of the provider selected applications 652 added to the download directory 239 via the provider. Removal can be by deletion of an application already sent to the directory 239 or by indicating that a particular application is not desired before such application is ever added to the download directory 239.

According to the above, applications can be accumulated into the per-vehicle download directory 239. At vehicle power-up, such applications can be downloaded and installed onto the vehicle. The download directory 239 can then accumulate new applications until a next vehicle power up.

It should be understood that an interface similar to that of the web portal 605 can be displayed on the head unit of the vehicle. The user could then make selections from such interface for selecting applications from the controlled list 610. The selected applications could be downloaded immediately to the vehicle instead of being put in the download directory when the selections are made from the interface.

FIG. 7 illustrates a system to select and distribute applications to a vehicle in a safe and intelligent manner according to user preferences.

One difference between the previously discussed system of FIG. 1 and the system of FIG. 7 is the install location for applications. Whereas the applications A-C in the system 100 of FIG. 1 are installed and operating on the mobile phone 20 (using the head unit 21 or other interface powered by the vehicle as an extended interface), the applications M-P/Q-S in the system 300 of FIG. 7 are installed on the head unit 321 or other component powered by the vehicle. In system 300 of FIG. 7, the software 330-332 enables a provider to select which applications can be installed on the head unit 321 and control distribution of the selected applications to the vehicle.

Before discussing the details of system 300 in detail in the following paragraphs, it should be apparent that the structures and functions of systems 100 and 200 described in FIGS. 1-6 can be combined with the structures and functions of system 300 (FIGS. 7-8) into a single system. For example, a single system could include some applications installed on a mobile phone using an interface of a vehicle as an extended interface and some applications installed on a component of the vehicle.

FIG. 8 illustrates a flow chart showing operation of the software of FIG. 7.

In block 801, the head unit 321 communicatively couples to a mobile device such as mobile phone 320. In one example, the connection 540 is established via Bluetooth pairing of the head unit 321 and the mobile phone 320. The Bluetooth pairing can be in response to the vehicle being powered up (causing the head unit to power up and search for a Bluetooth device), although it should be apparent that Bluetooth pairing could result from other circumstances such as the mobile phone 320 powering up, the mobile phone 320 being brought within range of the head unit 321, re-pairing after another Bluetooth device is disconnected from the head unit 321, etc. In other examples, the communicative connection can be established by a user connecting the mobile phone 320 to the head unit 321 using a USB connection.

In block 802, the control software 330 accesses a telephone number of the mobile phone 320. It should be understood that mobile phones are activated with a particular phone number in conjunction with subscribing to a call plan, which is the phone number the control software 330 reads from the mobile phone 320. In one example, the signaling 542 to obtain the phone number is performed using Bluetooth signaling.

In block 803, the control software 330 sends signaling 543 to the server 322. The signaling 543 can be sent over a local connection such as a USB, Bluetooth, or WiFi connection to be relayed by the mobile device 320 over a wireless telecommunications network. The content of the signaling 543 can be similar to the signal 244 described in more detail previously with respect to FIG. 4, but in addition, can provide the obtained phone number.

In block 804, the control software 332 compares the phone number included in the signaling 543 to the mapping 350. The mapping correlates each of a plurality of download directories A-B accessible via this particular head unit 321 to a particular phone number. For example, in the mapping a first phone number is correlated with the download directory A and a second phone number is correlated with the download directory B. The control software 332 selects one of the download directories A-B based on the comparison of the received telephone number to the mapping 350.

The software 332 then checks the selected one of the download directories A-B to determine if there are any applications currently stored in the selected directory. A scheme for intelligently selecting applications that are present in the download directories A-B will be discussed in detail later with reference to FIG. 9. For now, let it be assumed for the purposes of illustration that the download directories 339A and 339B currently include applications 340A (M-P) and 340B (Q-S), respectively, in addition to the head unit frontend configurations 369A and 369B.

As noted briefly in the previous paragraph, the download directories A-B include head unit frontend configurations A-B, respectively, in addition to the applications 340A and 340B. The configurations A-B can be stored as HTML code or other web code compatible with the web code renderer of the 399. Depending on which one of the head unit frontend configurations A-B is downloaded to the head unit 321, a display 380 of the head unit 321 will display a different graphical user interface. Each of the different web code files 369A and 369B will produce a different graphical user interface when displayed using the display 380 and the renderer 399. For example, each graphical user interface could have its own user customized settings such as a particular wallpaper selected by a user. A scheme for generating the different head unit frontend configurations A-B will be discussed in detail later with reference to FIG. 9.

In block 805, the software 332 generates and sends signaling to cause the IP gateway software 331 on the mobile phone 320 to operate as an IP gateway for forwarding applications to the head unit 321 similar to the scheme described in FIG. 4. In one example, similar to FIG. 4, such signaling includes communications to dynamically load the mobile phone 320 with the software 331 to cause the software 331 to operate thereon for the download to vehicle. This signaling may not take place if the mobile phone 320 is already loaded with the software 331 and ready for IP gateway operation. In other examples, the signaling 345 could originate from the control software 330 on the head unit 321 after the connection 540 is established.

In block 806, the software 332 generates and sends IP packets 545 to download the data from the selected one of the directories onto the vehicle, e.g. either applications M-P and configuration A or applications Q-S and configuration B. The IP packets 545 are received by the mobile phone 320 and forwarded by operation of the software 331 to the head unit 321. It should be understood that in this particular illustration the IP packets 545 include both applications and a configuration for the graphical user interface, but in other scenarios the IP packets 545 might contain either an application or a configuration. Also, it should be apparent that, if there are no applications currently in the selected download directory and there have been no changes to the configurations stored in the download directory since a previous download, then the IP packets 545 may not be sent.

In block 807, the software 330 receives the IP packets 545 and installs the applications included therein on the vehicle (installation can be on components of the head unit 321 or other vehicle components). The software 330 also processes the configuration from the IP packets 545 using the web code renderer 399 to generate a particular graphical user interface based on the detected phone number.

Thereafter, the graphical user interface output via the display 380 will correspond to one of the configurations A-B stored in the selected download directory. A user of the vehicle can operate the installed applications M-P or Q-S using the head unit 321 as an interface.

It should be understood that the software 330 and 332 can operate according to any of the principles described in FIGS. 1-3. For example, the software 330 and 332 can regulate utilization of the I/O resources of the head unit 321 by the active application(s) according to current vehicle status. As another example, in systems where applications are installed on both the vehicle and a mobile device, the software 330 and 332 can include all applications that utilize the vehicle interface in an application ranking/priority table similar to the table 13 (FIG. 1).

In the example described above, the control software 330 accesses a phone number of the mobile phone 320 to uniquely identify the mobile phone 320 from other mobile phones. In other examples, control software on the head unit 321 can access a different value on a communicatively coupled mobile phone to uniquely identify the mobile phone from other mobile phones. Other examples of values can include, but are not limited to, a physical address of the mobile phone. In such other examples, it should be apparent that such values are used in the mapping, e.g. if the other values are physical addresses then the mapping includes physical addresses correlated to download directories.

In the example described above, the control software 330 sends the accessed unique identifier (phone number in this example) to the server 322. In other examples, the mapping 350 can be stored on the vehicle. In such a case, the control software 330 identifies a particular download directory listed in the mapping according to the comparison and sends an identifier specifying the particular download to the server 322. The server 322 may then respond with IP packets 545 sending data from the identified download directory.

FIG. 9 illustrates more detail of the system shown in FIGS. 7-8.

It was previously explained that the server 322 includes a plurality of download directories 339A-B of applications waiting to be downloaded. FIG. 9 illustrates the user web portal 905 that can be involved in creating the download directories 339A-B and selection of the applications on a per-directory basis and describes an example use of this web portal 905.

A vehicle user can create a plurality of profiles corresponding to the vehicle using the profile creation portion 930 of the user web portal 905. A profile can be created for each person that may use the vehicle. A field 927 requests a unique phone number or other unique identifier of a mobile phone respectively corresponding to each person. A name of each person or other information for each person may be gathered with the phone number(s). After or during profile creation, server 322 creates a download directory for each profile and updates the mapping 350 for each number/directory combination. In some examples, the portion 930 can be configured to allow a user to rank the created profiles so that, if the head unit can be coupled to more than one of the mobile devices simultaneously (it can depend on the connection protocol whether this is possible), a higher ranked one of the corresponding profiles will be used.

During or after profile creation the web portal 905 can be operated to select applications to be included in the download directories 339A-B using a computing terminal 926, for example using any internet accessible computing device such as the mobile device or a desktop computer. The computing terminal 926 accesses the application selection portion 928 of the user web portal 905 (which is hosted by a web server operated by the provider in one example) to view the controlled list of applications that can be installed on the vehicle. The user can then send communications 961 to select applications from the controlled list that the user would like installed on his vehicle on a per-directory basis. These selections 962 are respectively fed into the download directories 339A-B on a per-directory basis.

The user web portal 905 can also be configured to allow a user to remove particular applications from the download directories 339A-B, e.g. the user may desire to remove one of the provider selected applications 952 added to the download directory 339A or 339B via the provider on a per-directory basis. Removal can be by deletion of an application already sent to the download directory 339A or 339B, or by indicating that a particular application is not desired before such application is ever added to the download directory 339A or 339B.

The user web portal 905 can also include a head unit frontend configuration customization portion 928. This portion 928 allows new configurations 369A-B to be added to the download directories 339A-B, with each person's configuration customized according to their requests. For example, a first wallpaper background can be added to the download directory 339A and a second different wallpaper background can be added to the download directory 339B. Other customizations can include customized graphical interface buttons, customized graphical user interface layout, custom images, etc.

According to the above, applications can be accumulated into the per-vehicle download directories 339A-B on a per-directory basis. Upon the head unit coupling to a particular one of the mobile devices, data from a corresponding one of the download directories 339A-B can be downloaded and installed onto the vehicle to provide a customized application set and a customized user interface.

It should be understood that an interface similar to that of the web portal 905 can be displayed on the head unit of the vehicle. The user could then make selections from such interface for selecting applications from the controlled list. The selected applications could be downloaded immediately to the vehicle instead of being put in the download directory when the selections are made from the interface.

FIG. 10 illustrates a system to select a head unit graphical interface according to a configuration of the head unit.

The system 1000 includes a server 1022 and a head unit 1021 that can include components similar to any of the previously described servers and head units. It should be appreciated that the server 1022 and the head unit 1021 communicate using a mobile device (not shown) that is coupled to the head unit 1021. The head unit 1021 includes control software 1030 and the server 1022 includes control software 1032.

The software 1032 identifies a configuration of the head unit 1021, for example, by probing 1081 the head unit 1021 to collect information. The software 1030 responds 1082 with information identifying the configuration of the head unit 1021. The response 1082 can include at least one of the following: a make/model/year of the vehicle, a predefined code, or an ad hoc listing of the configuration of the head unit 1021 (such as color/monochrome display, native resolution, etc.).

The software 1032 then selects from a plurality of graphical user interfaces based on the head unit information 1082. For example, if the head unit information 1082 includes a predefined code, the software 1032 can compare the code to a stored mapping 1085 of codes to graphical user interfaces Y-Z. The selected graphical user interface corresponds to a particular configuration of the head unit 1021 as reported by the information 1082. For example, if the head unit 1021 has a monochrome display, the selected Graphical User Interface (GUI) may be interface Y, whereas if the head unit 1021 has a color display, the selected GUI may be interface Z. Or, perhaps if the head unit 1021 has a native resolution of a first value, the selected GUI may be interface Y, whereas if the head unit 1021 has a native resolution of a second value, the selected GUI may be interface Z. If the make/model/year of the car indicates an interior of a first design, say a luxury motif, the selected GUI may be interface Y, whereas if the make/model/year of the car indicates an interior of a second design, say a sporty motif, the selected GUI may be interface Z.

Once a graphical user interface has been selected, the software 1032 conducts an IP packet transfer 1045 of the selected one of the graphical user interfaces Y-Z. It should be understood that the IP packet transfer 1045 may utilize the previously-described IP gateway software of the mobile phone (not shown). The software 1030 automatically installs the received graphical user interface. The selected graphical user interface can replace a default graphical user inference 1090 or previously downloaded graphical user interface residing on the head unit 1021 prior to the transfer 1045.

It should be understood that the previously described frontend configurations can be applied to the selected and installed GUI. For example, a selected GUI can be installed on the head unit 1021, and then further modified in appearance based on a customized frontend selection according to a telephone number of the mobile device currently coupled to the head unit 1021.

FIG. 11 illustrates a system to generate and send remote computing approvals to the head unit.

The system 1100 includes a server 1122 and a head unit 1121 that can include components similar to any of the previously described servers and head units. It should be appreciated that the server 1122 and the head unit 1121 communicate using a mobile device 1131. The head unit 1121 includes control software 1130 and the server 1122 includes control software 1132.

The head unit 1121 includes a remote desktop viewing program such as a Virtual Network Computing (VNC®) client 1148 to connect to the VNC server 1149 running on the mobile device 1131. By way of background, a VNC client and server communicate to display the server's desktop or other current view on the client's display. The human interfaces device(s) directly connected to the client, e.g. keyboard, mouse, etc., can then be used in conjunction with the displayed image to remotely control the computing device running the VNC server. If an application is running in full screen mode on the computing device with the VNC server, then the computing device with the VNC server controls that application (rather than the entire desktop).

The control software 1130 receives a request 1155 from the mobile device 1131 specifying a particular application X (1140). The control software 1130 identifies the application identifier corresponding to the request 1155 either by extracting the identifier itself from the request 1155 or using a lookup based on information gleaned from the request or from any communication with the mobile device 1131. The control software 1130 sends the communication 1156 containing the application identifier.

The control software 1132 compares the application identifier to an internal table and generates a VNC approval 1157 for the application X. The VNC approval 1157 specifies the particular conditions under which VNC is approved in conjunction for this application X. For example, if the application X is a navigation application, the approval 1157 might specify that VNC is approved when the vehicle is stopped or moving. In contrast, if the application X is a media creation application, the approval 1157 might specify that VNC is approved only when the vehicle is stopped.

The VNC approval 1157 can also specify different approvals based on whether the application is currently running in full screen mode or windowed mode. For example, the navigation application might be approved when the vehicle is moving, but only as long as the navigation application is running on the mobile device 1131 in full screen mode. This will prevent VNC functionality immediately if the user switches the navigation application into windowed mode while the vehicle is moving.

The VNC approval 1157 can also specify telephone numbers. For example, VNC can be permitted when the mobile device 1131 is running a media player application, but only if the mobile device has a particular telephone number (this can be used as a form of parental control).

The control software 1130 stores the received VNC approval 1157 in a database 1135 of VNC approvals. The control software 1130 continuously monitors conditions based on the VNC approvals stored in the database 1135 to generate the control signal 1160. The control signal 1160 controls whether a view 1161 of the mobile device 1131 can be currently displayed on a display of the head unit 1121 by the VNC client 1148. The control signal 1160 also controls whether inputs made using an input interface of the head unit 1121 will be sent 1162 to the VNC server 1149.

FIG. 12 illustrates a system to push graphical user interface updates to the head unit in response to the mobile device generating a request for a new application or the user web portal selecting a new application.

The system 1200 includes a server 1222 and a head unit 1221 that can include components similar to any of the previously described servers and head units. It should be appreciated that the server 1222 and the head unit 1221 communicate using a mobile device 1231.

The server 1222 can receive an indication of a new application to be used in the system 1200 in at least two different forms (the term new application refers to an application that has not previously been downloaded to the head unit 1221 and/or utilized the head unit 1221 as an extended interface). In one form, the mobile device 1231 sends an indication of a new application X (1240) to utilize the head unit 1221 as an extended interface. More specifically, this indication is an approval request 1271 generated and sent by the control software 1230 in response to receiving a request 1270 from the mobile device 1231.

Another way the server 1222 can receive an indication of a new application is from control over the user web portal 1205. The user web portal 1205 is similar to the previously described web portals. Using an application selection tool 1228, a user can use any remote computer to select applications to be included in a corresponding download directory (not shown) for installation on the head unit. Thus, a received selection 1274 including a new application is another form of indication of a new application to be used in the system 1200.

In response to detecting such an indication, the control software 1232 determines whether to transmit an IP packet transfer 1245 including a graphical user interface update for the new application X. It should be apparent that no such IP packet transfer will be sent if the new application X is not included in the previously discussed controlled list of applications (FIG. 6). In one example, the graphical user interface update modifies a previously selected and installed graphical user interface (FIG. 10) to add an icon for accessing the new application X. In another example, the graphical user interface update includes any other form of update to a previously selected and installed graphical user interface for operating new application X. The control software 1230 automatically installs the update in response to the sending of the request 1270 and/or the selections 1274. It should be apparent that the transfer 1245 can be included with a download of the application itself in the case that the download is waiting for vehicle power up in a download directory.

FIG. 13A illustrates a flow chart showing pre-operation of a parental control scheme.

In block 1301, the server designates at least one profile as being subject to parental control. This profile can be selected by the account holding, for example, by marking a selection using the web portal.

In block 1302, the server receives a login for a user designated as a parent (typically the account holder) for the profile subject to parental control. In block 1303, the server causes a list of applications associated with the profile subject to parental control to be displayed using the web portal.

In block 1304, after displaying the list, the server receives selections from the displayed list. The server may store these selections in the profile that is subject to parental control. The selections can include applications from the list and/or more detailed information in the case of a conditional approval (a conditional approval is discussed later in more detail).

FIG. 13B illustrates a flow chart showing operation of the parental control scheme.

In block 1320, in response to a mobile phone communicatively coupling with the head unit, the head unit obtains a telephone number of the mobile phone to be used to communicate with the server. In block 1321, the head unit sends the phone number to the server for analysis. If the obtained phone number does not match a profile designated as subject to parental control, then the parental control process completes in block 1322.

Otherwise, if the obtained phone number does correspond to the profile subject to parental control, then in block 1323 the server executes parental control. In one example, such execution includes blocks 1323-1327, similar to the VNC approval process, discussed in the next paragraph.

In block 1323, the server transmits a parental control message to the head unit. In block 1324, the head unit continuously monitors conditions based on the parental control message. In block 1325, the head unit blocks a particular application from using the head unit as an extended interface and/or blocks a particular application installed on the head unit from running. For example, the head unit might receive an indication that the particular mobile phone has received a telephone call, but then block the use of the head unit as an extended interface for the telephone call. Or, the head unit might block an attempt to run a media player application on the head unit in another example. The continuous monitoring may be facilitated by a database on the head unit storing received parental control messages.

In block 1326, the head unit conditionally blocks a particular application from using the head unit as an extended interface and/or running directly on the head unit. For example, the head unit might receive an indication that the particular mobile phone has received a telephone call, but then block the use of the head unit as an extended interface conditionally based on a value of a caller ID field on the incoming call. More specifically, the parental control message might designate certain telephone numbers as exceptions to preventing the head unit from providing an extended interface for the telephone. The head unit obtains the caller ID value from the mobile phone and blocks the mobile phone from utilizing an interface of the head unit conditionally. In another example, the head unit might block an application conditionally based on a condition of the vehicle, e.g. the head unit blocks the mobile phone from utilizing an interface of the head unit only if the vehicle is currently moving.

In block 1327, the head unit does not block the particular application if the application is permitted according to the parental control message. In this case, the head unit allows the application to operate according to approval by the server, e.g. according to whether the application is on the controlled list (FIG. 6).

It should be apparent that, in other examples, a system can enforce a parental control scheme using different processes than those specifically described above. For example, in another example, the processes of blocks 1323-1327 are not used. Instead, the head unit continuously reports conditions and application requests to the server, which dynamically withdraws a current approval according to the parental control settings. The server then controls the head unit to block a current disapproved application.

Extensible Scheme for Operating Vehicle Head Unit as Extended Interface for Mobile Device

There are known schemes for operating a vehicle head unit as an extended interface for a mobile device. However, in the known schemes, the configuration of the vehicle head unit is fixed at manufacture, and as a result, may be inoperable with newly released mobile applications. In a partial solution, the new mobile device application is downloaded to the vehicle head, which requires the vehicle head unit to be manufactured with relatively expensive hardware components to enable the download, installation, and operation of the mobile device application (on the vehicle head unit).

FIG. 14 illustrates a system to operate a vehicle head unit as an extended interface for a mobile device.

The system 1400 includes a server 1411, a vehicle head unit 1412, and a mobile device 1413 (which may be a long range wireless device, e.g. a cell phone, in one example), including processing devices 1408, 1409, and 1410, respectively. The vehicle head unit 1412 includes a short range input/output interface, such as a Bluetooth transceiver or a USB port, configured to couple the vehicle head unit 1412 to an available mobile device, such as mobile device 1413. Connection 1415 represents the connection between the vehicle head unit 1412 and the mobile device 1413. The server 1411 includes a network interface configured to communicate with the vehicle head unit 1412. The communications 1416 from the server 1411 may arrive at the vehicle head unit 1412 over the connection 1415 in one example (in some cases a vehicle head unit may utilize a long range radio of the mobile device to communicate with a remote network), or through another path (in some cases a vehicle head unit may utilize a long range radio of the vehicle to communicate with a remote network).

The server 1411 contains a memory storing groups of one or more application instruction(s) 1425 (each group corresponding to a mobile device application). The application instruction(s) of a group can be updated over time as mobile device applications are released. The vehicle head unit contains embedded software such as HMI application 1421, which, in contrast, can be fixed at the time of manufacture of the vehicle head unit 1412. The template HMI application 1421 is a “thin client” that is configured to execute a downloaded application instruction. The template HMI application 1421 again can be referred to as a “thin client” and operates independently of an interpreter, i.e. a component that interprets a scripting language, e.g. Java script, into another programming language. The template HMI application 1421 may include a plurality of generic display screens, e.g. a plurality of HMI screens 1423.

Many applications screens on head units can be generalized as one of a plurality of screen types. In an example, the plurality of screen types includes information type screens, e.g. screens that show lists of information, interaction type screens, e.g. screens to show an interactive messages such as a social networking post or email message, content display screens, e.g. screens that display now playing content such as content from a music application or a book application. Accordingly, in an example, the plurality of HMI screens 1423 includes an information screen, a content display screen, and an interactive message screen. A combination of the plurality of generic display screens, e.g. the plurality of HMI screens 1423, can be combined to form the screens of a given application. The individual template format may not change from one given application to another given application, just the content, images if any, order in which the screens are displayed, and button mapping to application function which is residing on the phone change from one given application to another given application.

The processing device 1408 is configured to download at least one of the groups of application instruction(s) 1425 to a memory 1450 of the vehicle head unit 1412. The download may occur at any time, but in one example may occur responsive to receiving a request from the processing device 1409 or the processing device 1410.

The download of a group of application instruction(s) may also be responsive to determining that the application of the mobile device 1413 is authorized to utilize a resource of the vehicle head unit 1412 based on a current status of the vehicle. It should be appreciated that the determination of whether the application is authorized may involve any combination of the principles described herein with reference to FIGS. 1-13B. In an example, the downloading may not occur responsive to determining that the application is not authorized to utilize the resource of the vehicle head unit 1412. In an example, the downloading may still occur responsive to determining that the application is not authorized to utilize the resource of the vehicle head unit 1412, but the server 1411 may prevent the application from utilizing the resource of the vehicle head unit 1412 at this time.

The downloaded application instruction(s) is configured to, when executed by the template HMI application 1421, instruct the template HMI application 1421 on how to control the particular mobile device application 1414, including what commands can be understood by the particular mobile device application 1414 and/or a format of those commands. Stated more generally, the downloading and execution of the application instruction(s) enables the template HMI application 1421 (which may be the original HMI application installed on the vehicle head unit at the time of its manufacture) to control the newly discovered particular mobile device application 1414 (which may be a “new” mobile device application, i.e. released or even developed post manufacture of the vehicle head unit).

In an example, the instruction delineates a specific order to display at least a portion of the plurality of HMI screens for the requested application. In other words, the specific order for the requested application may be different than a specific order corresponding to another application (each instruction for a plurality of applications of a mobile device may delineate a different order). It should be appreciated that one application may use a different portion of the plurality of HMI screens than another application (for example, one given application may use all the screens, while another given application may use only one of the screens).

If responses can be expected to be sent from the particular mobile device application 1414 to the template HMI application 1421, then the downloaded application instruction(s) may be configured to, when executed by the template HMI application 1421, provide the template HMI application 1421 with a format/structure of the response, including information describing how the template application 1421 is to display information included in the response. If responses can be expected to be sent from the particular mobile device application 1414 to the template HMI application 1421, then the downloaded application instruction(s) may be configured to, when executed by the template HMI application 1421, provide the template HMI application 1421 with a list of commands and responses that make up the order and sequence of messages exchanged between the template HMI application 1421 and the mobile device application 1414 for the involved use case.

FIG. 15 illustrates a signaling diagram showing one example of operations that can be performed by the server, the vehicle head unit, and the mobile device of FIG. 14.

After the vehicle head unit 1412 and the mobile device 1413 are coupled, the vehicle head unit 1412 provides a vehicle head unit profile to the mobile device 1413 (signal 1502). The vehicle head unit profile may include a unique identifier for the vehicle head unit 1412. The vehicle head unit profile may include a list of all groups of application instruction(s) currently stored on the vehicle head unit 1412. In an example, the vehicle head unit profile also identifies at least one language or protocol supported by the vehicle head unit 1412.

The mobile device 1413 provides a mobile device profile and the vehicle head unit profile to the server 1411 (signal 1503). The mobile device profile may include a unique identifier, e.g. a unique identifier of the mobile device or a user account identifier, that is different than the unique identifier for the vehicle head unit 1412. The mobile device profile may include a list of all applications currently stored on the mobile device 1413 (although in some examples the unique identifier may correspond to the user account allowing the server 1411 to ascertain all applications currently associated with the user account based on the account identifier). In an example, the mobile device 1413 identifies Template HMI application(s) 1421 supported by the vehicle head unit 1412 and identifies application(s) 1414 to operate with the Template HMI application(s) 1421.

The server 1411 downloads an application instruction 1425, e.g. a set of application instructions, to the mobile device 1413 (signal 1507). In an example, the server 1411 may download application logic, e.g. logic configured to command/control a particular application, corresponding to an identified application. In an example, a downloaded application instruction comprises a result of a command executed by the corresponding application logic. The download for the vehicle head unit 1412 may comprise an update to an application instruction(s) from the list, or a new application instruction(s) not yet stored on the vehicle head unit 1412. Similarly, a download for the mobile device 1413 may be an update for an existing application of the mobile device 1413, or a download for a new application.

The mobile device 1413 stores any received application logic in local memory and provides the vehicle head unit 1412 with the downloaded application instruction(s) 1425 (signal 1508). The application logic stored in the memory of the mobile device 1413 may be executed responsive to a user input received by the mobile device 1413.

If the vehicle head unit 1412 receives an application instruction, the vehicle head unit 1412 may build a graphical user interface with software buttons for a mobile device application that can utilize the vehicle head unit 1412 as an extended interface (signal 1509). The displayed GUI may utilize one of the HMI screens 1423 (FIG. 14) of the template HMI application 1421 (FIG. 14). In response to a user input selecting a mobile device application to utilize the vehicle head unit 12 as an extended interface, the vehicle head unit 12 executes a corresponding one of the downloaded application instruction(s) (signal 1511). The vehicle head unit operates the template HMI application based on a result of the executing the corresponding application instruction(s) (signal 1513).

In one example use case, executing a first instruction of a group of application instructions causes the vehicle head unit to send a particular message to the mobile device application to cause the mobile device application to respond by sending back content to the vehicle head unit. In this example use case, the next instruction in the group causes the vehicle head unit to compare some or all of the content to a parameter or value contained in the next instruction. Depending on a result of the comparison, the vehicle head unit may proceed to the next instruction, or proceed directly to another instruction after the next instruction, or display a certain text of a screen, or wait for a user to enter a selection via an interface of the vehicle head unit, or complete, etc., depending on the particularities of the executed instruction.

In an example operating according to the principles described with references to FIGS. 14 and 15, application logic for the application to utilize a resource of the vehicle head unit is distributed between a mobile device and the vehicle head unit. In another example operating according to the principles described with references to FIGS. 14 and 15, all of the code associated with the application logic is stored on the mobile device.

In an example, a memory device having instructions stored thereon that, in response to execution by a processing device, cause the processing device to perform operations is provided. An operation includes coupling a mobile device and a vehicle head unit. An operation includes sending, to a remote network device, a request for an application of the mobile device to utilize a resource of the vehicle head unit, the request including a first profile of the vehicle head unit and a second profile of the mobile device. An operation includes, responsive to sending the request, receiving an instruction from the remote network device, the instruction to be executed by embedded software of the vehicle head unit so as to enable the requested application to utilize a resource of the vehicle head unit.

In an example, the embedded software comprises a template HMI application and a plurality of HMI screens, and the instruction delineates a specific order to display at least a portion of the plurality of HMI screens for the requested application. In an example, the template HMI application operates without an interpreter component.

In an example, the first profile identifies a first unique identifier that corresponds to the vehicle head unit and identifies a language or protocol associated with the embedded software. In an example, the second profile identifies a second unique identifier that is different than the first unique identifier.

In an example, the instruction comprises a result of a command or control function executed by application logic associated with the requested application. In an example, the operations include, responsive to the request, updating code that is stored on the mobile device and that corresponds to the application logic. In an example, code corresponding to the application logic is configured to interoperate with the vehicle head unit responsive to the mobile device receiving a user input, the interoperation according to a result of the execution of the instruction by the vehicle head unit.

In an example, a memory device having instructions stored thereon that, in response to execution by a processing device, cause the processing device to perform operations is provided. An operation includes receiving a request for an application of a mobile device to utilize a resource of a vehicle head unit, the request including a first profile of the vehicle head unit and a second profile of the mobile device. An operation includes determining whether the requested application is authorized to utilize the resource of the vehicle head unit based on a current status of the vehicle. An operation includes, responsive to determining that the requested application is authorized to utilize the resource of the vehicle, downloading an instruction to the vehicle head unit, the instruction to be executed by embedded software of the vehicle head unit so as to enable the requested application to utilize a resource of the vehicle head unit.

In an example, the embedded software comprises a template HMI application and a plurality of HMI screens, and the instruction delineates a specific order to display at least a portion of the plurality of HMI screens for the requested application. In an example, the template HMI application operates without an interpreter component.

In an example, the first profile identifies a first unique identifier that corresponds to the vehicle head unit and identifies a language or protocol associated with the embedded software. In an example, the second profile identifies a second unique identifier that is different than the first unique identifier.

In an example, the instruction comprises a result of a command or control function executed by application logic. In an example, the operations include, responsive to determining that the requested application is authorized to utilize the resource of the vehicle, updating code that is stored on the mobile device and that corresponds to the application logic. In an example, code corresponding to the application logic is configured to interoperate with the vehicle head unit responsive to the mobile device receiving a user input, the interoperation according to a result of the execution of the instruction by the vehicle head unit.

Referring now to FIG. 16, it illustrates another aspect of the present disclosure, namely another system for extending a mobile phone user application to utilize an HMI of a vehicle head unit. This simplified diagram has three main components, a mobile phone 1640, a motor vehicle head unit 1620 and a remote server 1670. As indicated in FIG. 16, the mobile phone 1640 includes communication capability to conduct packet data communications 1652, for example, over a mobile network 1654. Various voice and or data services may be used for communications with the server. The mobile network, in turn, may have a gateway (not shown) to the internet, shown as IP Cloud 1666. The remote server 1670 has a communications component (not shown) to conduct communications 1668 via the internet 1666.

Among other things, the arrangement of FIG. 16 enables downloading of user applications programs, for example, a user application 1644 shown installed on the mobile phone 1640, from the server 1670. Other methods of downloading user application programs were discussed above. It is also known to acquire a mobile application program from an online “app store.” In addition, the illustrated system can be used to download phone application information (“phone app information”) 1680 located at the server 1670, to the mobile phone. The phone app information may be provided on a per user application basis, as further discussed below. The phone app information 1680 may be acquired from, maintained, or updated from a separate remote server (not shown). In a preferred embodiment, the phone app application information is downloaded to an HAP application program 1642 on the mobile phone.

The motor vehicle head unit 1620 includes an HUP software component 1630 which is arranged to conduct communications 1635 with the mobile phone. The head unit proxy 1630 is operatively coupled to the HMI 1622 of the head unit 1620. For example, the HUP may interact with the HMI via various software components and protocols. As discussed above, the HMI of the head unit may include a display screen, which may be a touch screen, a microphone, speakers and other I/O elements. In this illustration, the HMI includes one or more generic display screens 1624. We refer here not to the physical display screen, but rather software elements that define the appearance and operation of one or more generic screens. These generic display screens may be used to extend the user interface of the user application program 1644 executing on the mobile phone 1640 as explained in greater detail below. The head unit and the mobile phone may be communicatively coupled by a short range wireless link, for example a Bluetooth® link, or other non-contact means such as IR, or by a cable.

Head unit HMI display and associated application logic cannot easily be updated due to limitations of the head unit platform resources. Consequently, the HMI may not be well adapted to serve as an extended interface for newer user application programs that may not have existed at the time that the head unit was manufactured or programmed. In some cases, it may be costly or impractical for the vehicle manufacturer or automotive OEM to update head unit firmware to accommodate new user application programs and their corresponding command and control functionality for the purpose of interacting with the head unit.

Various head unit platforms are known in OEM and aftermarkets. They may use various types of embedded processors and operating systems, for example Windows® Automotive, Android, QNX, etc. The head unit typically contains display screens that can be used to display content in a passive manner. That is, the head unit can receive and display content, such as a graphic or picture, or play an audio file, without knowing or understanding that content or the meaning of the data that it displays. In addition, typically, the head unit is not capable of managing the state or use case relative to the state of the application residing on the phone with which it may be interacting. Thus, the head unit may be likened to a terminal, lacking user application specific business logic.

Typically, a head unit includes input UI elements. Turning to FIG. 21, it shows a simplified example of a head unit 2102 that may be found in a motor vehicle. The head unit in this illustration shows a physical display screen 2104, which may be a touch screen, and it also includes one or more mechanical buttons or switches 2110, 2112 that may be located in the bezel or frame surrounding the display screen. Buttons 2110 and 2112 illustrate actual physical hardware switches that may be pressed by user's fingers as an input device. The display screen may be used to display data, messages, images, or other content received by the head unit from the user application as discussed herein. The content may include audio or video data for presentation through the head unit.

Many head units implement generic display templates or layouts. For example, a simple template may be provided to display a video and its title. Such a template would populate only two regions of a display screen, for example, placing the video in a region 2134, and the title or related information in a text display region or window 2140 below the video. Another template may provide for six input buttons. In the case of mechanical buttons, for example 2110 and 2112, they may be built into the bezel with three on each side. Text or images may be output to the HMI so as to display a corresponding image, badge or other identifier adjacent to each of the mechanical buttons. These identifiers may be displayed, for illustration, in the six regions marked 2120 in the drawing, corresponding to the six mechanical buttons represented as heptagons. In this way, the function or meaning of the hard button can be varied by displaying a different identifier adjacent to the hard button. In the case that display screen 2104 is touch sensitive (a “touch screen”), the same regions 2120, duly identified, may be used as input buttons themselves. A generic display template for use with a touch screen may be configured to provide for any predetermined size and arrangement of detectable touch regions. In one example, the HMI would then simply output a message or event that indicates which region was pressed. It need not understand its import.

In general, the head unit 2102 can be used for input to a user application program that is executing in a nearby mobile phone, by utilizing the system of FIG. 16. Further, the head unit may have other input services or hardware, not shown, such as a microphone to receive audible commands. In addition, the head unit may have access to one or more vehicle networks, for example a CAN network, to acquire information from the vehicle which can also serve as an input to a user application. For example, the vehicle state, such as speed, may be passed on to the HAP for consideration in connection with enforcing safety policies.

In order for a generic HMI of a head unit, and more specifically generic screen displays, to be used to extend the user interface of an application program, information that is specific to the user application program must be employed, in order to appropriately translate and map communications between the user application 1644 and the HMI 1622. That type of information, identified as 1680 in FIG. 16, may be maintained on the remote server 1670 and downloaded upon request. Once that information has been downloaded and stored in the mobile phone, in a manner assessable to the HAP application, it can provide this functionality. More specifically, in preferred embodiments, the downloaded phone app information 1680 can be used by HAP to manage command and control flow and state for each use case relative to the subject application installed on the mobile phone, and the display or other output of data via the head unit. The HAP can output content in a format appropriate to various generic screen display templates, or template layouts, so that the head unit can display that information without knowledge or logic that is specific to the user application such as use cases, status and state. Rather, in one preferred embodiment, user application status and state are maintained by the HAP on the mobile phone.

FIG. 17 is a functional block diagram illustrating an example of software components that may be contained in an HAP application, such as that indicated at 1642 in FIG. 16. In FIG. 17, the HAP 1700 in one embodiment comprises an API 1702 coupled to an HAP message handling component 1704. The following components may be implemented using JavaScript or any suitable scripting language. We will refer to JavaScript by way of illustration. The message handling component may include a JavaScript Interpreter 1706. The JavaScript Interpreter is communicatively coupled to individual JavaScript components for one or more user application programs, shown as “nomadic application,” for example, component 1710, for applications 1-n. A separate JavaScript component preferably is provided for each application program of interest. Three such JavaScripts are shown in the drawing for illustration although this number is not critical.

Each JavaScript in turn contains or is coupled to access a corresponding template message translator 1712. This will be used for translating messages communicated between the mobile phone and the head unit as further explained below. The JavaScript components for a given user application may be downloaded upon request, as noted earlier, from the phone app information store 1680 on the server 1670. A request to the server may include an identifier of the user's application program. In a preferred embodiment of this aspect of the invention, the request for phone app information need not identify the head unit or HMI specifically. It may identify a generic type of head unit or display, or not identify the head unit at all.

The HAP application 1700 further may include a protocol stack 1720 for communications with the head unit. Alternatively, or in addition, the HAP 1700 may include a simpler message framing protocol component 1722, for communication with head units that cannot support a more elaborate protocols such as HTTP/TCP/IP/SLIP. A protocol discriminator component 1730 serves to determine what protocols are applicable and direct communication accordingly. Finally, the protocol discriminator is coupled to a suitable communication component 1740.

Each individual JavaScript, for example 1720, implements user application logic and message format comprehension that would otherwise be contained in the associated head unit HMI application unit if it were designed for interaction with the corresponding user app. In this case, however, the HMI is not so configured, so it is treated as a generic HMI. A standard “template screen” on the head unit cannot make decisions or persist applications state. It can only be used to display categorized content, for example, lists, basic messages, results and “now playing” screens. For example, referring to FIG. 21, a display area 2134 might be used to display selected content as noted. A template message translator may be used to translate the nomadic application specified request and response messages to the format required to the template-based head unit HMI screens. Further, the JavaScript 1710 may contain button mapping information along with visual button identification data which can be sent to the screen to visually identify the corresponding button(s), as noted above with reference to FIG. 21, based on the individual phone application represented by the associated JavaScript.

Referring now to FIG. 18, this shows a simplified diagram illustrating an example of data flow between a user application program and a vehicle head unit HMI utilizing the integrated HAP application. A user application (“nomadic applications”) 1800 interacts with an HAP API 1802 arranged to communicated messages to a corresponding JavaScript program 1810 also installed on the mobile phone. The JavaScript 1810 includes appropriate user app HMI logic and state management code 1812. Messages 1814 from the user app are formatted as they would be in normal operation of the user app 1800.

The JavaScript 1810 for user app 1800 further includes a template message translator (“TMT”) component 1820. In operation, the TMT receives a message from the logic 1812, and translates it into a template formatted message, i.e. one compatible with the head unit. The template formatted message 1824 is then communicated to the head unit 1830. Conversely, in the other direction, a template formatted message 1834 may be communicated from the head unit to the JavaScript 1810, where it is received by the TMT 1820, and translated to a form useful to the application logic and state management 1812. The logic may then determine to send a message 1840 (user app formatted) to the application 1800 via the HAP API. Each request message received from the head unit will result in one or more transactions between the JavaScript code and the user application before a result is returned to the head unit.

FIG. 19 comprises a messaging or signaling diagram showing one example of interactions among software components in the case of a synchronous message, meaning one initiated by the HMI of the head unit. To begin, an event 1902 is received from a head unit HMI. As a simple example, it may be a button press, corresponding to PLAY, where a music player app is executing on the mobile phone. The event is communicated via the HUP as illustrated in FIG. 16. A JavaScript interrupter 1910 is incorporated into the HAP, as shown, including a JavaScript Manager 1912, Abstract JavaScript component 1920, Application JavaScript 1930, and a status manager component 1932. The Application JavaScript is specific to the user application shown as “nomadic application” 1940 which includes an application proxy interface 1942. A JavaScript Interrupter of this type is commonly available in mobile phone SDK's.

The Abstract JavaScript translates the message for the Application JavaScript, and the Application JavaScript 1930 executes its application business logic on the HMI event. If a call to the user app is appropriate, a message or call is sent (1950) to the HAP message handler. The HAP message handler, in turn, sends the message to the user app (“invokeApplicationCallback”) 1952. The app sends a response to the message handler (“aqSendMsg”) 1954. The message handler may translate the message, and in turn Abstract JavaScript may exercise translate message logic to send an appropriate message to the Application JavaScript. The Application JavaScript executes its business logic, stores or updates status and contents 1932, and translates the response into a template format to send to the HMI, see 1960.

FIG. 20 comprises a messaging or signaling diagram showing one example of interactions among software components in the case of an asynchronous message, meaning one initiated by the user application executing on the mobile phone. To begin, the app sends a message which is received by the HAP, see 2010. The HAP message handler 2012 sends the message to Application JavaScript, which will call its logic, store or fetch status and contents, and if necessary, generate an HMI update message 2030.

In an example, a system is provided. The system includes a vehicle head unit, the head unit implementing at least one type of generic application display screen; a server computer, the server computer arranged for communications over a mobile network to a mobile phone; wherein the server computer is further arranged to deliver phone application information associated with a specific user application program executable on a mobile phone, and the server delivers the phone application information to the mobile phone via the mobile network; and wherein the phone application information enables extending a user interface of the specific user application program to utilize the generic application display screen of the vehicle head unit.

In an example, the system includes an HAP software application executable in a mobile phone; and an HUP software application executable on the head unit; wherein the HAP and the HUP are arranged to communicate messages or events between them, and to utilize aspects of the phone application information to enable the specific user application program on the mobile phone to interact with the generic application display screen of the vehicle head unit. In an example, the head unit does not install or execute HMI display application logic specifically developed to interact with the specific user application program on the mobile phone. In an example, the HAP is arranged to send one or more of content, text and images to the an HUP for rendering on the generic application display screen in accordance with a predetermined template layout of the generic application display screen. In an example, the HAP software application and the HUP software application are each implemented in a scripting language. In an example, the phone application information includes data for implementing a safety policy in connection with execution of the specific user application program. In an example, the HAP includes a message handling component, and at least one protocol stack coupled to the message handling component, for communications with the head unit; the message handling component includes at least one scripting language component associated with a specific user application program; and the scripting language component includes a corresponding template message translator component, the message translator component configured for translating request and response messages generated by the corresponding user application program into a format compatible with a template-based generic application display screen(s) of a vehicle head unit. In an example, the scripting language component includes corresponding user application logic to obviate specific user application logic in the head unit. In an example, the scripting language component maintains application state for the corresponding user application logic to obviate maintaining state in the head unit.

In an example, a computer-implemented method for use in a mobile phone is performed. The computer-implemented method includes identifying a user application program installed on a mobile phone; requesting information specific to the identified user application from a remote server; receiving phone application information downloaded from a remote server responsive to the information request, wherein the phone application information enables extending a user interface of the identified user application program to utilize a generic application display screen of a vehicle head unit.

In an example, the computer-implemented method includes installing an HAP software application on the mobile phone; and installing an HUP software application executable on a vehicle head unit; wherein the HAP and the HUP are arranged to communicate messages or events between them, and to utilize aspects of the phone application information to enable the identified user application program on the mobile phone to interact with the generic application display screen of the vehicle head unit.

In an example, the computer-implemented method includes, in the HAP software application, translating request and response messages generated by the corresponding user application program into a format compatible with a template-based generic application display screen(s) of a vehicle head unit.

In an example, the computer-implemented method includes, in the HAP software application, translating messages or events received from the vehicle head unit into a format compatible with the corresponding user application program.

In an example, the computer-implemented method includes, in the HAP software application, translating a request message generated by the corresponding user application program into a format compatible with a template-based generic application display screen(s) of a vehicle head unit so as to render one or more of content, text and images on a generic application display screen of the vehicle head unit.

In an example, the computer-implemented method includes receiving a message from the head unit; interacting with the user application program responsive to the received message; and returning a result provided by the user application program to the head unit. In an example, the computer-implemented method includes translating the result into a format compatible with the template-based generic application display screen(s) of the vehicle head unit. In an example, the computer-implemented method includes translating the button press event message from the head unit based on a current user application program state and based on a button identifier previously sent to the head unit for display.

In an example, a method for extending a user interface of a smart phone user application to an HMI of a vehicle head unit is provided. The method includes installing a user application program in a smart phone; communicatively coupling the smart phone to a head unit of a vehicle; and executing an HAP software component in the smart phone; wherein the HAP includes an API for interfacing to the user application, and an interface for communicating with a vehicle head unit; receiving in the HAP a button press notification from the head unit-HMI; in the HAP, mapping the button press notification to a UI control specific to the executing user application; and in the HAP, communicating the UI control to the executing user application.

In an example, the mapping is based on a visual button identifier previously sent from the HAP to the head unit for display to visually identify a selected button on a generic touch screen display of a vehicle head unit.

In an example, the method includes maintaining user application program status in the HAP so as to obviate maintaining user application program status in the head unit.

Efficient Headunit Communication Integration

HTTP is often the communication approach chosen by designers of in vehicle automotive IVI where there is a need for communication between the IVI and applications running on the user's cell phone, and for communication between applications running on the IVI and content and configuration servers running on the internet or other IP based network connection.

In the case where the IVI application needs to communicate with a backend system on the internet or other IP based network connection using HTTP, and the IVI is relying on the user cell phone with internet connection as the communication path for this communication, the user's cell phone includes application that receives HTTP request from the IVI and then on behalf of the IVI application creates an HTTP request to a specific endpoint over the mobile IP of the cellular network to marshal the IVI request intent to that end point on the internet.

On this same IP connection the cellphone application will also receive the response from the endpoint on the internet. Once the response is received then the cell phone application will need to send the response back to the IVI application as if it were the response for the original pending IVI application request. This approach is needed in order to avoid the added cost imposed by the cellular carrier when using the cell phone as a simple network access device to the internet (PPP->IP->TCP to cellular network).

When a cellphone application acts as an intermediate proxy for HTTP requests between an IVI application and a backend service, it introduces the risk of interception or tampering with communication. In such a configuration, an IVI application cannot make use of standard transport level security mechanisms to ensure its communication with a backend service is secure since the cellphone application is acting as a “man-in-the-middle”. If security assurances commensurate with transport level security are required, custom security must instead be implemented on top of HTTP. This custom security adds to the development cost of the system, introduces the likelihood of incompatibility with existing backend services, and widens the security attack surface of the overall system.

When a cellphone application acts as an intermediate proxy for HTTP requests between the IVI application and the backend, by definition it constrains the application level protocol that can be used. In such a configuration, the IVI is prevented from making use of non-HTTP protocols. Instead, existing applications must be redesigned to support tunneling of their requests through HTTP. Tunneling of requests through HTTP adds to the complexity and cost of the system, and introduces the likelihood of incompatibility of the system with existing backend services.

To address the multitude of problems with an HTTP-only proxy solution, an alternate or complementary solution(s) makes use of a TCP or UDP proxy embedded in the cellphone application.

FIG. 22 illustrates a system for efficient headunit communication integration.

The system 2200 includes a head unit 2201 and a mobile device 2203. The head unit 2201 may include a processing device 2202 configured to couple to mobile device 2203 and transmit to the mobile device 2203 a request to utilize a resource of the mobile device. The mobile device 2203 may include a processing device 2204 configured to determine whether to authorize the request. The processing device 2204 may be configured to utilize a proxy of the mobile device to establish a connection with a destination in response to determining to authorize the request.

FIG. 23 is a simplified communication diagram illustrating a smartphone application enabling data exchange between an IVI and a backend (remote server) utilizing SOCKS (SOCKet Secure) Proxy protocol.

In one embodiment, a standard SOCKS (SOCKet Secure) proxy is included within the cellphone application. The SOCKS proxy acts as an intermediary between the IVI environment and the greater IP network backend. By proxying data at the TCP or UDP layer, the IVI and backend can make use of a greater range of network services than is available with an HTTP proxy alone.

In an example, head unit 2301 may initiate SOCKS negotiation with mobile device 2303 in order to provide a request to utilize a resource of the mobile device 2303, e.g. transmit SOCKS request message 2310. Mobile device 2303 may be configured to, in response to receiving the request, determine 2313 whether to authorize the request. In an example, the request may indicate a destination (i.e. server 2305) for the head unit 2301 to communicate with using a resource of the mobile device 2303, e.g. a long range transceiver of the mobile device 2303. Mobile device 2303 may be configured to determine whether to authorize the request based on an identifier associated with the indicated destination. In an example, mobile device 2303 may be configured to determine whether the identifier is included in a locally or remotely stored white list, e.g. may be configured to compare the identifier to the white list.

The destination based authorization may be one portion of a policy enforcement scheme. For example, mobile device 2303 may be configured to check a subscription/account state associated with the request. The mobile device 2303 may be configured to determine that the request is authorized if the destination is included in the whitelist and the subscription/account state corresponds to a predefined state, e.g. an active state.

The mobile device 2303 may be configured to, in response to determining to authorize the request, transmit a communication 2316 to establish a connection with the indicated destination. In an example, the mobile device 2303 may be configured to open a socket to the indicated destination in order to establish a TCP or UDP connection.

The mobile device 2303 may be configured to transmit a SOCKS completion message 2319 corresponding to the SOCKS request message 2310. The head unit 2301 may communicate (2322) with the server 2305 via the long range transmitter and over the connection 2316.

FIG. 24 is a simplified communication diagram illustrating a smartphone application providing transparent proxy server functionality to enable data exchange between an IVI and a backend (remote server).

In another example, the head unit 2401 uses a TCP or UDP socket without SOCKS negotiation and the mobile device 2403 takes care of transparently proxying the TCP or UDP socket to a destination endpoint on the IVI's behalf. The head unit 2401 may be configured to transmit a communication 2410 to provide a request to utilize a resource of the mobile device 2303. For example, the head unit 2401 may be configured to open a socket to a well known port.

The mobile device 2403 may be configured to determine 2413 whether to authorize the request. In an example, mobile device 2403 may be configured to identify the port on which the request is received at the mobile device. The mobile device 2403 may be configured to determine whether a local or remote mapping includes an entry corresponding to the identified port. The mobile device 2403 may be configured to not authorize the request in response to determining that the mapping does not include the entry. The mobile device 2403 may be configured to discover a destination in response to determining that the mapping includes the entry. In an example, the mapping of well known port(s) to destinations is provided by the server 2405.

Similar to the previous example, the destination based authorization may be one portion of a policy enforcement scheme. For example, mobile device 2403 may be configured to check a subscription/account state associated with the request. The mobile device 2403 may be configured to determine that the request is authorized if the mapping includes the entry corresponding to the identified port and the subscription/account state corresponds to a predefined state, e.g. an active state.

The mobile device 2403 may be configured to, in response to discovering the destination, transmit a communication 2416 to establish a connection with the indicated destination. In an example, the mobile device 2403 may be configured to open a socket to the discovered destination in order to establish a TCP or UDP connection.

The mobile device 2303 may be configured to transmit an acknowledgement 2419 corresponding to the communication 2410. The head unit 2401 may communicate (2422) with the server 2405 via the long range transmitter and over the connection 2416.

In each of the examples described with respect to FIGS. 23 and 24, the IVI application and backend can communicate with added flexibility since the application protocol is no longer limited to HTTP, although HTTP is not precluded. Further, the IVI application and backend can use transport level security including, but not limited to, Secure Socket Layer (SSL) or Transport Layer Security (TLS) to provide strong security assurances for communication. In addition, the lack of an intermediate HTTP proxy allows for greater efficiencies when streaming requests between the IVI application and the backend service since the intermediate proxy does not need to parse requests and responses before proxying them.

FIG. 25 is a simplified communication diagram illustrating a smartphone application enabling data exchange between an IVI and a backend (remote server) utilizing SOCKS Proxy protocol chaining.

In an example, a proxy, e.g. a SOCKS proxy, is included within the HUP and HAP. This is referred to as proxy chaining. The proxy chain acts as an intermediary between the IVI environment and the greater IP network backend. By proxying data at the TCP or UDP layer, the IVI and the backend can make use of a greater range of network services than is available with an HTTP proxy alone.

In an example, head unit 2501 may include an IVI application 2502 with a SOCKS proxy client and a SOCKS proxy server 2504. Head unit 2501 may initiate SOCKS negotiation with mobile device 2503 in order to provide a request to utilize a resource of the mobile device 2503, e.g. transmit SOCKS proxy chaining communication 2310 for a SOCKS request message originating from the IVI application 2502.

Head unit 2501 may be configured to perform an initial portion of an authorization check prior to the transmission of proxy chaining communication 2510. For example, head unit 2501 may be configured to check subscription/account state, and in an example cause the proxy chaining communication 2510 to be transmitted in response to determining that the that the subscription/account state corresponds to a predefined subscription/account state, e.g. an active subscription/account state. If the subscription/account state does not correspond to the predefined subscription/account state, e.g. corresponds to an inactive subscription/account state, the proxy chaining communication 2510 is not transmitted.

Mobile device 2503 may be configured to, in response to receiving the request of the SOCKS proxy chaining communication 2510, determine 2513 whether to authorize the request. In an example, the determination by the mobile device 2503 is a subsequent portion of the authorization scheme. In an example, the subsequent portion may be based on a destination associated with the request. For example, the request may indicate a destination (i.e. server 2505) for the head unit 2501 to communicate with using a resource of the mobile device 2503, e.g. a long range transceiver of the mobile device 2503. Mobile device 2503 may be configured to determine whether to authorize the request based on an identifier associated with the indicated destination. In an example, mobile device 2503 may be configured to determine whether the identifier is included in a locally or remotely stored white list, e.g. may be configured to compare the identifier to the white list.

In the above example, the enforcement of an authorization scheme is distributed between the head unit 2501 and the mobile device 2503. In another SOCKS Proxy protocol chaining example, the enforcement of an authorization scheme may be performed by the head unit 2501 or the mobile device 2503.

The mobile device 2503 may be configured to, in response to determining to authorize the request, transmit a communication 2516 to establish a connection with the indicated destination. In an example, the mobile device 2503 may be configured to open a socket to the indicated destination in order to establish a TCP or UDP connection.

The mobile device 2503 may be configured to transmit a SOCKS completion message 2519 corresponding to the SOCKS request message 2510. The head unit 2501 may communicate (2522) with the server 2505 via the long range transmitter and over the connection 2516.

FIG. 26 is a simplified communication diagram illustrating a smartphone application providing transparent proxy server functionality to enable data exchange between an IVI and a backend (remote server) utilizing transparent proxy chaining.

In another example, IVI applications do not need to implement the SOCKS client protocol. Instead, the IVI application uses a TCP or UDP socket without SOCKS negotiation and the head unit application takes care of transparently proxy chaining the TCP or UDP socket to a destination endpoint on the IVI's behalf.

In an example, head unit 2601 may include an IVI application 2602 without a SOCKS proxy client and a transparent proxy server 2604. IVI application 2602 may open a socket to a well known port in order to initiate a request to utilize a resource of a remote device.

Similar to the previous example, head unit 2601 may be configured to perform an initial portion of an authorization check prior to opening the socket to the well known port. For example, head unit 2601 may be configured to check subscription/account state, and in an example cause socket to be opened to the well known port in response to determining that the subscription/account state corresponds to a predefined subscription/account state, e.g. an active subscription/account state. If the subscription/account state does not correspond to the predefined subscription/account state, e.g. corresponds to an inactive subscription/account state, the socket is not opened.

Mobile device 2603 may be configured to, in response to receiving the request of the SOCKS request message 2610, determine 2613 whether to authorize the request. In an example, the determination by the mobile device 2603 is a subsequent portion of the authorization scheme. In an example, the subsequent portion may be based on a destination associated with the request. For example, the request may indicate a destination (i.e. server 2605) for the head unit 2601 to communicate with using a resource of the mobile device 2603, e.g. a long range transceiver of the mobile device 2603. Mobile device 2603 may be configured to determine whether to authorize the request based on an identifier associated with the indicated destination. In an example, mobile device 2603 may be configured to determine whether the identifier is included in a locally or remotely stored white list, e.g. may be configured to compare the identifier to the white list.

In another proxy chaining example, the enforcement of an authorization scheme may be performed by the head unit 2601 or the mobile device 2603. As an example of the authorization scheme being performed by the head unit 2601, the head unit 2601 may be configured to determine whether to authorize the request responsive to the opening of the socket. For example, head unit 2601 may be configured to identify the port on which the request is received at the transparent proxy server 2604. The head unit 2601 may be configured to determine whether a local or remote mapping includes an entry corresponding to the identified port. The head unit 2601 may be configured to not authorize the request in response to determining that the mapping does not include the entry. The head unit 2601 may be configured to discover a destination in response to determining that the mapping includes the entry. The head unit 2601 may be configured to share the discovery of the destination with the mobile device 2603.

Regardless of which device(s) perform the authorization, the mobile device 2603 may be configured to, after the discovery of the destination, transmit a communication 2616 to establish a connection with the indicated destination. In an example, the mobile device 2603 may be configured to open a socket to the discovered destination in order to establish a TCP or UDP connection.

The mobile device 2603 may be configured to transmit a SOCKS completion message 2619 corresponding to the communication 2610. The head unit 2601 may communicate (2622) with the server 2605 via the long range transmitter and over the connection 2616.

In each of the examples described with respect to FIGS. 25 and 26, the IVI application and backend can communicate with added flexibility since the application protocol is no longer limited to HTTP, although HTTP is not precluded. Further, the IVI application and backend can use transport level security including, but not limited to, SSL or TLS to provide strong security assurances for communication. In addition, the lack of an intermediate HTTP proxy allows for greater efficiencies when streaming requests between the IVI application and the backend service since the intermediate proxy does not need to parse requests and responses before proxying them.

In an example, a method is provided. The method includes coupling a mobile device and a vehicle head unit; receiving, at the mobile device, a request for the vehicle head unit to utilize a resource of the mobile device; determining, by the mobile device, whether to authorize the request; and in response to determining to authorize the request, utilizing a proxy of the mobile device to establish a connection with a destination.

In an example, the determining is based on an identifier associated with the destination. In an example, the method includes determining whether the identifier or the destination is included in a white list.

In an example, the method includes identifying a port on which the request is received at the mobile device; determining whether a mapping includes an entry corresponding to the identified port; and in response to determining that the mapping includes the entry, discovering the destination.

In an example, the proxy of the mobile device comprises a first proxy server that is different than a second proxy server that transmitted the request from the vehicle head unit. In an example, the first proxy server comprises a first SOCKS proxy server. In an example, the determining is based on an identifier associated with the destination. In an example, the method includes determining whether the identifier or the destination is included in a white list. In an example, the method includes identifying a port on which the request is received at the mobile device; determining whether a mapping includes an entry corresponding to the identified port; and in response to determining that the mapping includes the entry, discovering the destination. In an example, determining, by the mobile device, whether to authorize the request further comprises checking a subscription/account state associated with the request; and determining to authorize the request in response to determining that the mapping includes the entry and the subscription/account state corresponds to a predefined subscription/account state.

In an example, a specially configured memory device is provided. The memory device has instructions stored thereon that, in response to execution by a processing device, cause the processing device to perform operations including coupling a mobile device and a vehicle head unit; receiving, at the mobile device, a request for the vehicle head unit to utilize a resource of the mobile device; determining, by the mobile device, whether to authorize the request; and in response to determining to authorize the request, utilizing a proxy of the mobile device to establish a connection with a destination.

In an example, the determining is based on an identifier associated with the destination. In an example, the operations include determining whether the identifier or the destination is included in a white list.

In an example, the operations include identifying a port on which the request is received at the mobile device; determining whether a mapping includes an entry corresponding to the identified port; and in response to determining that the mapping includes the entry, discovering the destination.

In an example, the proxy of the mobile device comprises a first proxy server that is different than a second proxy server that transmitted the request from the vehicle head unit. In an example, the first proxy server comprises a first SOCKS proxy server. In an example, the determining is based on an identifier associated with the destination. In an example, the operations include determining whether the identifier or the destination is included in a white list. In an example, the operations include identifying a port on which the request is received at the mobile device; determining whether a mapping includes an entry corresponding to the identified port; and in response to determining that the mapping includes the entry, discovering the destination. In an example, determining, by the mobile device, whether to authorize the request further comprises checking a subscription/account state associated with the request; and determining to authorize the request in response to determining that the mapping includes the entry and the subscription/account state corresponds to a predefined subscription/account state.

It will be obvious to those having skill in the art that many changes may be made to the details of the above-described embodiments without departing from the underlying principles of the invention. The scope of the present invention should, therefore, be determined only by the following claims.

Most of the equipment discussed above comprises hardware and associated software. For example, the typical navigation device is likely to include one or more processors and software executable on those processors to carry out the operations described. We use the term software herein in its commonly understood sense to refer to programs or routines (subroutines, objects, plug-ins, etc.), as well as data, usable by a machine or processor. As is well known, computer programs generally comprise instructions that are stored in machine-readable or computer-readable storage media. Some embodiments of the present invention may include executable programs or instructions that are stored in machine-readable or computer-readable storage media, such as a digital memory. We do not imply that a “computer” in the conventional sense is required in any particular embodiment. For example, various processors, embedded or otherwise, may be used in equipment such as the components described herein.

Memory for storing software again is well known. In some embodiments, memory associated with a given processor may be stored in the same physical device as the processor (“on-board” memory); for example, RAM or FLASH memory disposed within an integrated circuit microprocessor or the like. In other examples, the memory comprises an independent device, such as an external disk drive, storage array, or portable FLASH key fob. In such cases, the memory becomes “associated” with the digital processor when the two are operatively coupled together, or in communication with each other, for example by an I/O port, network connection, etc. such that the processor can read a file stored on the memory. Associated memory may be “read only” by design (ROM) or by virtue of permission settings, or not. Other examples include but are not limited to WORM, EPROM, EEPROM, FLASH, etc. Those technologies often are implemented in solid state semiconductor devices. Other memories may comprise moving parts, such as a conventional rotating disk drive. All such memories are “machine readable” or “computer-readable” and may be used to store executable instructions for implementing the functions described herein.

A “software product” refers to a memory device in which a series of executable instructions are stored in a machine-readable form so that a suitable machine or processor, with appropriate access to the software product, can execute the instructions to carry out a process implemented by the instructions. Software products are sometimes used to distribute software. Any type of machine-readable memory, including without limitation those summarized above, may be used to make a software product. That said, it is also known that software can be distributed via electronic transmission (“download”), in which case there typically will be a corresponding software product at the transmitting end of the transmission, or the receiving end, or both.

Having described and illustrated the principles of the invention in a preferred embodiment thereof, it should be apparent that the invention may be modified in arrangement and detail without departing from such principles. We claim all modifications and variations coming within the spirit and scope of the following claims. 

1. A method, comprising: receiving, at a mobile device, a request for a motor vehicle component coupled to the mobile device by at least one of a wire or a short range wireless transmitter; responsive to receiving the request, ascertaining, based on information about a destination of the request, whether to permit the motor vehicle component to utilize a resource of the mobile device to establish an IP (internet protocol) based network connection with the destination; authorizing the request for the motor vehicle component to utilize the resource of the mobile device to establish the IP based network connection with the destination based on a result of the ascertaining; and utilizing a proxy of the mobile device to establish the IP based network connection with the destination if the request is authorized.
 2. The method of claim 1, wherein the ascertaining further comprises comparing an identifier corresponding to the destination to a predefined list.
 3. The method of claim 1, wherein the ascertaining further comprises: determining, by the motor vehicle component, whether a subscription/account state corresponding to the request corresponds to a predefined subscription/account state; and in response to determining, by the motor vehicle component, that the subscription/account state corresponds to the predefined subscription/account state, determining, by the mobile device, whether an identifier corresponding to the destination corresponds to an entry in a predefined list.
 4. The method of claim 3, further comprising: transmitting, by the motor vehicle component, a SOCKS (SOCKet Secure) proxy chaining communication to the mobile device in response to determining, by the motor vehicle component, that the subscription/account state corresponds to the predefined subscription/account state; and recognizing, by the mobile device, the destination from the received SOCKS proxy chaining communication.
 5. The method of claim 3, further comprising: opening, by the motor vehicle component, a first socket to a well known port in response to determining, by the motor vehicle component, that the subscription/account state corresponds to the predefined subscription/account state; and opening, by the mobile device, a second socket in response to determining, by the motor vehicle component, that the identifier corresponding to the destination corresponds to the entry in the predefined list.
 6. The method of claim 1, further comprising: identifying a port on which the request is received at the mobile device; determining whether a mapping includes an entry corresponding to the identified port; and in response to determining that the mapping includes the entry, identifying a value usable for establishing the IP based network connection to the destination responsive to data of the entry.
 7. The method of claim 1, wherein the proxy of the mobile device comprises a first proxy server that is different than a second proxy server that transmitted the request from the motor vehicle component.
 8. The method of claim 7, wherein the first proxy server comprises a first SOCKS proxy server.
 9. The method of claim 1, further comprising: identifying a port on which the request is received at the mobile device; determining whether a mapping includes an entry corresponding to the identified port; and in response to determining that the mapping includes the entry, identifying a value usable to establish the IP based network connection to the destination responsive to information of the entry.
 10. The method of claim 9, further comprising: checking, by the mobile device, a subscription/account state associated with the request; and wherein the request is authorized in response to determining that the mapping includes the entry and the subscription/account state corresponds to a predefined subscription/account state.
 11. A memory device having instructions stored thereon that, in response to execution by a processing device of a mobile device, cause the processing device to perform operations including: identifying, at the mobile device, a request for a motor vehicle component coupled to the mobile device by at least one of a wire or a short range wireless transmitter; responsive to identifying the request, ascertaining, based on information about a destination of the request, whether to permit the motor vehicle component to utilize a resource of the mobile device to establish a network connection with the destination; authorizing the request for the motor vehicle component to utilize the resource of the mobile device to establish the network connection with the destination based on a result of the ascertaining; and utilizing a proxy of the mobile device to establish the network connection with the destination if the request is authorized.
 12. The memory device of claim 11, wherein the ascertaining further comprises determining, by the mobile device, whether an identifier corresponding to the destination corresponds to an entry in a predefined list only if a subscription/account state corresponding to the request corresponds to a predefined subscription/account state.
 13. The memory device of claim 12, wherein the operations further comprise: responsive to receiving a SOCKS (SOCKet Secure) proxy chaining communication originating from the motor vehicle component, recognizing, by the mobile device, the destination from the received SOCKS proxy chaining communication.
 14. The memory device of claim 11, wherein the network connection comprises an Internet Protocol (IP) based network connection.
 15. The memory device of claim 11, wherein the operations further comprise determining whether an identifier corresponding to the destination is included in a white list.
 16. The memory device of claim 11, wherein the operations further comprise: identifying a port on which the request is received at the mobile device; determining whether a mapping includes an entry corresponding to the identified port; and in response to determining that the mapping includes the entry, identifying a value usable to establish the network connection to the destination responsive to data of the entry.
 17. The memory device of claim 16, wherein the operations further comprise: opening a socket based on the corresponding entry.
 18. The memory device of claim 11, wherein the operations further comprise: opening a socket in response to determining, by the motor vehicle component, that an identifier corresponding to the destination corresponds to the entry in the predefined list.
 19. The memory device of claim 11, wherein the proxy of the mobile device comprises a first proxy server that is different than a second proxy server that transmitted the request from the motor vehicle component.
 20. The memory device of claim 11, wherein the first proxy server comprises a first SOCKS proxy server 